Prometheus: Remote read endpoint allows denial of service via crafted snappy payload

CVE-2026-42154

### Impact The remote read endpoint (`/api/v1/read`) does not validate the declared decoded length in a snappy-compress

历史摘要 · 未重新核验 · GitHub Advisory

Prometheus Azure AD remote write OAuth client secret exposed via config API

CVE-2026-42151

### Impact Users who use Azure AD remote write with OAuth authentication are impacted. The `client_secret` field in th

历史摘要 · 未重新核验 · GitHub Advisory

gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository

## **Summary** attachments: [pocs.zip](https://github.com/user-attachments/files/26431422/pocs.zip) Submodule names com

历史摘要 · 未重新核验 · GitHub Advisory

gix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository

## Summary attachments: [pocs.zip](https://github.com/user-attachments/files/26431422/pocs.zip) When `Repository::subm

历史摘要 · 未重新核验 · GitHub Advisory

The AWP Classifieds plugin for WordPress is vulnerable to SQL Injection via the 'regions'...

CVE-2026-5100

The AWP Classifieds plugin for WordPress is vulnerable to SQL Injection via the 'regions' parameter array keys in versio

历史摘要 · 未重新核验 · GitHub Advisory

An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the...

CVE-2026-44028

An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix Archive) parser

历史摘要 · 未重新核验 · GitHub Advisory

Improper privilege management in the log rotation mechanism of the Skylight Workspace Config...

CVE-2026-7791

Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpace

历史摘要 · 未重新核验 · GitHub Advisory

Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a...

CVE-2026-7776

Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition

历史摘要 · 未重新核验 · GitHub Advisory

Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking

CVE-2026-42033

## Summary When `Object.prototype` has been polluted by any co-dependency with keys that axios reads without a `hasOwnP

历史摘要 · 未重新核验 · GitHub Advisory

Axios: Header Injection via Prototype Pollution

CVE-2026-42035

### Summary A prototype pollution gadget exists in the Axios HTTP adapter (lib/adapters/http.js) that allows an attacke

历史摘要 · 未重新核验 · GitHub Advisory

Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0

CVE-2026-42043

**1. Executive Summary** This report documents an **incomplete security patch** for the previously disclosed vulnerabili

历史摘要 · 未重新核验 · GitHub Advisory

Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking

CVE-2026-42264

## Summary Five config properties in the HTTP adapter are read via direct property access without `hasOwnProperty` guar

历史摘要 · 未重新核验 · GitHub Advisory

webonyx/graphql-php has quadratic validation cost in OverlappingFieldsCanBeMerged via inline fragments

## Summary `OverlappingFieldsCanBeMerged` validation rule has `O(n^2 x m^2)` worst case via flattened inline fragments.

历史摘要 · 未重新核验 · GitHub Advisory

livewire-markdown-editor has arbitrary file upload that allows stored XSS via attachment handler

### Impact All versions of `mckenziearts/livewire-markdown-editor` prior to **v1.3** contain a critical arbitrary file u

历史摘要 · 未重新核验 · GitHub Advisory

pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted `proxy.*` config (incomplete fix for CVE-2026-33509 /...

CVE-2026-42313

### Summary The `set_config_value()` API method (`@permission(Perms.SETTINGS)`) in `src/pyload/core/api/__init__.py` ga

历史摘要 · 未重新核验 · GitHub Advisory

net-imap vulnerable to STARTTLS stripping via invalid response timing

CVE-2026-42246

### Summary A man-in-the-middle attacker can cause `Net::IMAP#starttls` to return "successfully", without starting TLS.

历史摘要 · 未重新核验 · GitHub Advisory

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow...

CVE-2026-41927

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firew

历史摘要 · 未重新核验 · GitHub Advisory

Conditional Fields for Contact Form 7 WordPress plugin through version 2.6.7 contains an...

CVE-2026-25863

Conditional Fields for Contact Form 7 WordPress plugin through version 2.6.7 contains an uncontrolled resource consumpti

历史摘要 · 未重新核验 · GitHub Advisory

apko doesn't verify downloaded apk packages against APKINDEX checksum (package substitution possible)

CVE-2026-42575

apko verifies the signature on `APKINDEX.tar.gz` but never compares individually downloaded `.apk` packages against the

历史摘要 · 未重新核验 · GitHub Advisory

apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root

CVE-2026-42574

### Impact A crafted `.apk` could install a `TypeSymlink` tar entry whose target pointed outside the build root, and a

历史摘要 · 未重新核验 · GitHub Advisory